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SPECIFICATION 



5 FIELD OF THE INVENTION 

The present invention relates to remote installation of computer software and, in 
particular, to a mechanism for automatically, accurately, and remotely installing and updating 
computer software distributed over a computer network. 

10 

BACKGROUND OF THE INVENTION 

O The Internet is just the latest of a growing number of large computer networks in which a 

m number of server computer systems provide services to countless client computer systems. Each 
J|J of the server computer systems require maintenance as new software is made available or 
35 existing software is upgraded. 

j! Such maintenance typically involves a human computer engineer accessing each server 

individually and customizing software for each server. Requiring human access to each 
SJ individual server effectively limits the number of servers that can be maintained and represents a 
iy relatively high cost for such maintenance. 

SO What is needed is a mechanism by which software installation and maintenance to 

various servers of a computer network can be more automated and, as a result, more error-free. 
Such a system would significantly reduce the cost in providing large numbers of such servers. 



25 

SUMMARY OF THE INVENTION 

In accordance with the present invention, computer software is installed in a selected one 
of a number of server computer systems using an installation template. The installation template 
includes placeholder data which represents server-specific information used to install the 
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computer software. The placeholder is included in program modules, configuration data files, 
and/or installation scripts. To install the computer software on the selected server computer, a 
master server retrieves server-specific information for the selected server, substitutes the 
retrieved server-specific data for the placeholder data to form server-specific installation data, 
5 and transports the server-specific installation data to the selected server for execution. 

The master server maintains a service and package interdependency database in which 
relationships between various types of software are recorded and associated with server-specific 
data. To initiate installation of a particular collection of software on a particular destination 
server computer, a network manager simply stores the requisite server-specific information and 
10 associates the requisite server-specific information with the collection of software. One or more 
^ templates corresponding to the collection of software are then retrieved, placeholder data in those 
*jf templates are replaced with server-specific data, and the resulting installation data is transported 

to the destination server computer. 
}^ The destination server computer periodically searches predetermined locations, e.g., a 

#5 predetermined directory within the destination server computer, for installation data representing 
hh pending installations. To enhance security, the destination server computer determines that the 

S installation data is owned by a previously authorized entity prior to carrying out the installation, 
j The installation can include executing one or more installation scripts which in turn copy 

O program modules and/or configuration data files to locations within the destination server 
"70 computer which are specified in the installation scripts. As a result of the placeholder data 

substitution carried out by the master server, all configuration data files, program modules, and 
installation scripts are custom tailored to the selected destination server computer. 

Installing computer software in accordance with the present invention provides a 
tremendous benefit. In particular, a network manager can specify inter-relationships between 
25 various software packages and services once and can thereafter accurately and easily initiate 

proper installation of such software packages and services on multiple server computers. Such 
installation is initiated by simply specifying a relatively few number of server-specific pieces of 
information and associating that information with a software service. Since the server-specific 
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information is entered automatically, the chances for clerical error during such installation are 
greatly reduced. In addition, server-independent portions of the installation data are configured 
only once and chances for clerical errors in those portions are greatly reduced. As a result, effort 
required to install numerous services and packages throughout a multitude of server computers is 
significantly reduced while accuracy of such installations is significantly improved. 



BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram of a software distribution and installation system in 
accordance with the present invention. 

Figure 2 is a block diagram of a package and service datastore of the system of Figure 1 . 

Figure 3 is a block diagram of the package/service interdependence database of Figure 2 
in accordance with the present invention. 

Figure 4 is a logic flow diagram of the user interface by which the user specifies changes 
to packages and services are maintained with the servers of Figure L 

Figure 5 is a logic flow diagram of the installation of a service and requisite packages in 
accordance with the present invention. 

Figure 6 is a logic flow diagram of the installation of a package and requisite packages in 
accordance with the present invention. 

Figure 7 is a logic flow diagram of the installation of an individual service or package in 
accordance with the present invention. 

Figure 8 is a logic flow diagram of the local installation by a server in accordance with 
the present invention. 

Figure 9 is a block diagram illustrating the directory hierarchy by which multiple versions 
of services and packages can coexist in a single server in accordance with the present invention. 
Figure 10 is a logic flow diagram of retrieval of a service from a source code control 

system. 

Figure 1 1 is a screen view of the user interface by which a network manager can add, 
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delete, or edit a service record in the package/service interdependence database of Figure 2. 

Figure 12 is a screen view of the user interface by which a network manager edits an 
existing service record in the package/service interdependence database of Figure 2. 

Figure 13 is a screen view of the user interface by which a network manager edits an 
5 existing service version record in the package/service interdependence database of Figure 2. 

Figure 14 is a screen view of the user interface by which a network manager edits an 
existing package record in the package/service interdependence database of Figure 2. 

Figure 15 is a screen view of the user interface by which a network manager a network 
manager can add, delete, or edit a package record in the package/service interdependence 
1 0 database of Figure 2. 

m Figure 1 6 is a screen view of the user interface by which a network manager edits an 

S existing package version record in the package/service interdependence database of Figure 2. 
J! Figure 1 7 is a screen view of the user interface by which a network manager can add, 

delete, or edit an IP address record in the package/service interdependence database of Figure 2. 
¥5 Figure 1 8 is a screen view of the user interface by which a network manager edits an 

s existing service in the package/service interdependence database of Figure 2. 

S Figure 19 is a screen view of the user interface by which a network manager can add, 

I u delete, or edit a machine record in the package/service interdependence database of Figure 2. 
O Figure 20 is a screen view of the user interface by which a network manager edits an 

2t) existing machine record in the package/service interdependence database of Figure 2. 

Figure 21 is a screen view of the user interface by which a network manager commits or 

rolls back actions in the package/service interdependence database of Figure 2. 

25 DETAILED DESCRIPTION 

In accordance with the present invention, a human engineer using a computer system 102 
can maintain numerous software services and packages installed on a number of servers 104A-C 
(Figure 1) through a single master server 108 and a computer network 110. As described more 
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completely below, each software service and package is represented in a package and service 
template datastore 120 in templatized form. 

As used herein, services and packages are types of computer software, i.e., computer 
instructions and data which collectively define one or more tasks to be carried out by one or more 
5 computers. A service is generally a collection of computer software which, when executed, 

serves requests for data and/or processing through a computer network such as computer network 
110 — i.e., remote requests. A package is generally a collection of computer software which, 
when executed, serves local requests for data and/or processing — i.e., requests from other 
computer processes executing in the same computer. Within any of servers 104A-C, a service 
10 can depend upon, i.e., submit requests to, one or more packages within the same server. 
^ Similarly, a package within any of servers 1 04A-C can submit requests to, and therefore depend 
*0 upon, one or more other packages within the same server. The distinction herein between 

services and packages is primarily conceptual and somewhat arbitrary and, in other 
% embodiments, services and packages can be treated identically. In this illustrative embodiment, 
W5 services and packages also differ in that multiple versions of a package can be installed in a 
b single one of servers 104A-C while only a single version of any service is permitted to be 

2 installed in any server. 

TCI Within package and service template datastore 120, each service and package is 

□ represented in a templatized form. Specifically, a template 202 (Figure 2) represents a complete 
5t) installation of a service or a package with any and all server-specific information represented by 
placeholder data. In this illustrative embodiment, servers 104A-C are Internet servers running a 
Unix-type operating system and the server-specific information includes an Internet protocol (IP) 
address and a machine host name of the server. Such information is represented in template 202 
by "%%WEB JP%%" or "%%MUSIC_IP%%" for IP addresses and 
25 "%%MACHINE_NAME%%" for machine host names. Other placeholder data can be used for 
other installation-specific data within template 202. The following table identifies placeholder 
data and the information represented thereby. 



— 6 — 



Patent Application 



Table A 



Attorney Docket P-2138D1 





Placeholder Data 


Information Represented 




%%SERVICE DOMAIN NAME%% 


A fully qualified domain name of a service (e.g., 
www.liquidmusicnetwork.com). 




%%MACHINE_DOMAIN_NAME%% 


A domain name of a specific server computer (e.g., 
liquidaudio.com). 


5 


%%MACHINE_NAME%% 


A machine name of a server without a domain (e.g., 
saffron). 




%%MUSIC_IP%% 


An IP address used for a particular type of service 
(e.g., to stream and/or download music — both 






HTTP and non-HTTP). 




%%package-name ROOT%% 


An absolute path to a version-independent directory 
for the package identified by package-name, 

IT a J JT o 




%%package-name_VERSlON%% 


A version number for the package identified by 






package-name. 




%%package-name VROOT%% 


An absolute path to a version-dependent directory 
for the package identified by package-name. 


i) 


%%SERVICE_NAME%% 


A name of a service. 




%%SERVICE_ROOT%% 


An absolute path to a version-independent directory 
for the service. 




%%SERVICE_VERSION%% 


A version number of the service. 




%%SERVICE_VROOT%% 


An absolute path to a version-dependent directory 
for the service. 




%%WEB_IP%% 


An IP address used for connections through the 
World Wide Web. 



15 



Template 202 includes one or more configuration data files 204, one or more installation 
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scripts 206, and one or more program modules 208. Configuration data files 204 include 
configuration data which influences the behavior of program modules 208 during execution and 
can include server-specific information represented by placeholder data as described above. 
Installation scripts 206 include commands to be executed by a server to effect installation of the 
5 service or package represented by template 202. Installation scripts 206 can similarly include 
server-specific information represented by placeholder data as described above. Program 
modules 208 contain computer instructions and data which specify actions to be taken by a 
computer to thereby provide the service or package represented by template 202. Installation of a 
service or package from template 202 is described more completely below. 
10 Package and service template datastore 120 also includes a package/service 

^ interdependency database 210 which is shown in greater detail in Figure 3. A service is 
C s represented in package/service interdependency database 210 by a service record within service 
jg table 376, and a package is represented by a package record within package table 370. Service 
^ records of service table 376 include a service identifier 378 which uniquely identifies the service 
15 represented by the service record, a name 380 of the service, and a domain name 382 by which 
a the service can be requested through computer network 110 (Figure 1), which is the Internet in 
S this illustrative example. Package records of package table 370 (Figure 3) include a package 
I ^ identifier 372, which uniquely identifies the package represented by the package record, and a 
O name 3 74 of the package. 

20 Figure 1 1 shows a display 1 100 of a web browser, executing in computer 102 for 

example, which provides a user interface by which a network manager modifies contents of 
service table 376 (Figure 3). Display 1 100 shows an HTML (hypertext markup language) form 
by which the network manager can specify desired changes to service table 376. Web browsers 
and HTML forms are known and are not described herein. 

25 Display 1 100 (Figure 11) includes a list 1 102 of services currently represented in service 

table 376 (Figure 3). The items listed in list 1 102 are the service names represented by name 380 
of individual records in service table 376. The network manager can add a new service to service 
table 376 by entering the name (for storage as name 380) of the service in text box 1 108, entering 
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the corresponding domain name (for storage as domain name 382) in text box 1110, and pressing 
button 1112 using conventional user interface techniques including physical manipulation of user 
input devices. As described more completely below, actions which effect addition of the new 
service are stored in an action list and can be rolled back. The rolling back of actions on the 
5 tables of package/service interdependency database 210 is described below in conjunction with 
Figure 2L Similarly, all modifications to package/service interdependency database 210 
described below in conjunction with Figures 1 1-20 are represented by actions stored in action list 
384 (Figure 3) such that all modifications to package/service interdependency database 210 can 
be rolled back prior to commitment by the network manager. 
10 The network manager removes an existing service from service table 376 by selecting the 

^ name of the service from list 1 102 and pushing button 1 106 using conventional user interface 
€t techniques. Similarly, the network manager edits an existing service within service table 376 by 
£ selecting the name of the service from list 1 1 02 and pushing button 1 1 04. 
J: In response to selecting a service and pushing button 1 104, master server 108 sends an 

tH5 HTML form through computer network 1 10 to computer 102 such that display 1200 (Figure 12) 
* is presented to the network manager. Though the form of display 1200, the network manager can 

5S modify the name of the service in text box 1202 and the domain name of the service in text box 

1204. Upon pushing button 1206, the form data of display 1200 is sent to master server 108 
Q (Figure 1) and, in response thereto, master server 108 adds to the list of pending actions, an 
5t) action in which the selected service record is modified such that name 380 (Figure 3) stores the 
name as modified in text box 1202 (Figure 12) and domain name 382 stores the domain name as 
modified in text box 1204. 

Display 1400 (Figure 14) includes a list 1402 of names of packages (from name 370) 
currently represented in package table 370 (Figure 3). The network manager can add a new 
25 package to package table 370 by entering the name of the package in text box 1408 (Figure 14) 
and pressing button 1410. As a result, the form data of display 1400 is sent through computer 
network 1 10 (Figure 1) to master server 108 and master server 108 adds to the list of pending 
actions an action to add a package record to package table 370 (Figure 3) whose name 374 is the 
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name specified in text box 1408 (Figure 14). 

The network manager removes an existing package from package table 370 (Figure 3) by 
selecting the name of the package from list 1402 (Figure 14) and pushing button 1406. The 
result is an action to delete the specified package record appended to the list of pending actions. 
5 Similarly, the network manager edits an existing package within package table 370 (Figure 3) by 
selecting the name of the package from list 1402 (Figure 14) and pushing button 1404. In editing 
a package, the network manager can modify the name of the package, and the name as modified 
is represented in name 374 (Figure 3) by an action appended to the list of pending actions. 

Multiple versions of services and packages are supported in the system described herein, 
1 0 and multiple versions of packages can coexist in the system described herein. Accordingly, 

service version records of a service version table 346 (Figure 3) represent specific versions of a 
yj service, e.g., the service represented within service table 376 as shown in Figure 3. A service 
JE version record includes a service version identifier 348 which uniquely identifies the service 
^ version represented by the service version record, a service identifier 350 which identifies the 
Ij service to which the service version record corresponds, a version 352, and a remark 354. Since 
s multiple versions of a service can exist within package/service interdependency database 210, 
J- other service version records can also identify the same service record, through service identifier 
I y 378, as the service to which the other service version records correspond. 
O Display 1200 (Figure 12) includes form components to allow addition, deletion, and 

2D modification of service versions of service version table 346. In particular, the network manager 
removes a service version by selecting the version from a list 1208 (Figure 12) and pushing 
button 1212. The items of list 1208 are values stored in version 352 (Figure 3) of service version 
table 346. The network manager adds a new version to service version table 346 by entering the 
version (version 352) in text box 1214 (Figure 12), entering a comment (remark 354) in text box 
25 1216, and pushing button 1218. The associated service (service identifier 350) is the service 
represented in text boxes 1202-1204. The network manager edits a service version of service 
version table 346 by selecting the version from list 1208 and pushing button 1210. In response to 
pushing button 1210, master server 108 (Figure 1) presents the HTML form of display 1300 
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(Figure 13) to the network manager. The form of display 1300 is described below. 

Package version records of a package version table 336 (Figure 3) represent specific 
versions of a package. A package version record includes a package version identifier 338 which 
uniquely identifies the package version represented by the package version record, a package 
5 identifier 340 which identifies the package to which the package version record corresponds, a 
version 342, and a remark 344. Since multiple versions of a package can exist simultaneously, 
other package version records can also identify the same package record, through package 
identifier 372, as the package to which the other package version records correspond. 

Display 1 500 (Figure 1 5) represents a form by which the network manager can edit an 
1 0 existing package and add, delete, and/or modify versions of a package. The network manager 

can add to the list of pending actions an action changing the name of the package as represented 
tfl by name 374 (Figure 3) by modifying the name represented in text box 1502 (Figure 15) and 
jr pushing button 1 504, 

fi Versions of the package whose name appears in text box 1502, i.e., the subject package in 

lH5 the context of Figure 15, are listed in list 1506. The items of list 1506 are version names as 
s represented by version 352 (Figure 3) for each version of the subject package stored in 
S package/service interdependency database 210. To add a new version of the subject package, the 
| ^ network manager enters the name of the new version in text box 1512 (Figure 1 5) and can enter 
O any associated comments (to be stored as remark 344) in text box 1514 and pushes button 1516. 
56 To delete a version of the subject package, the network manager selects a version name from list 
1506 (Figure 15) and pushes button 1510. To edit a version of the subject package, the network 
manager selects a version name from list 1506 (Figure 15) and pushes button 1508. 

In response to pushing of button 1508, master server 108 (Figure 1) sends data 
representing the form of display 1600 (Figure 16) through computer network 1 10 to computer 
25 102 for display to the network manager. The package name and version are represented in 

combination in text box 1602 and the network manager can modify the name and version of the 
package in text box 1602 using conventional user interface techniques. Remark 344 (Figure 3) is 
represented in text box 1604 and can be modified there by the network manager using 
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conventional user interface techniques. 

As described above, a service can depend upon one or more packages. Such dependency 
is represented in respective service-package records of service-package table 310. A service- 
package record includes a service-package identifier 312 which uniquely identifies the service- 
5 package dependency represented by the service-package record. The service-package record also 
includes a service version identifier 314 and a package version identifier 316. Service version 
identifier 314 identifies the service — and version of the service — which is dependent upon a 
package, and package version identifier 316 identifies the package — and version of the package 
— upon which the service is dependent. 
< 10 Dependency of a service upon a package, e.g., version 5.0a25 of the "1ms" package, is 

reflected in display 1600 (Figure 16). List 1610 includes names and versions of various services 
vS represented in package/service interdependency database 210 (Figure 3). Those services which 
jr depend upon the subject package version, i.e., the package version represented in text box 1602 
jL; (Figure 1 6), are shown in a highlighted state. For example, version 1 .4 of the merchant service is 
!H5 shown to depend upon version 5.0a25 of the 1ms package. Accordingly, package/service 
J interdependency database 210 (Figure 3) includes, in service-package table 3 10, a record 
rf identifying both version L4 of the merchant service in service version table 346 and version 
nJ 5.0a25 of the 1ms package in package version table 336. The network manager can delete such a 
p dependency by clicking on "merchant 1.4" in list 1610 (Figure 16) and pushing button 1612. 
2& Similarly, the network manager can create a similar dependency between version 1 .5 of the muze 
service and version 5.0a25 of the 1ms package by clicking on "muze 1.5" in list 1610 and pushing 
button 1612. 

Similarly, a package can depend upon one or more other packages. Such dependency is 
represented in respective package dependency records of package dependency table 302 (Figure 
25 3). A package dependency record includes a package dependency identifier 304 which uniquely 
identifies the inter-package dependency represented by the package dependency record. A 
package dependency record also includes package version identifiers 306 and 308. Package 
version identifier 306 identifies the package — and version of the package — which is dependent 
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upon a package, i.e., the referenced package, and package version identifier 308 identifies the 
referenced package — and version of the referenced package — upon which the former package 
is dependent. 

Packages on which version 5.0a25 of the 1ms package can depend are listed by package 
5 name and version in list 1606 (Figure 16). Packages on which version 5.0a25 of the 1ms package 

does depend are shown in a highlighted state — display 1600 shows no such dependencies. The 

network manager can add and delete such dependencies using list 1 606 and button 1608 in the 

manner described above with respect to list 1610 and button 1612. 

As described above, server-specific information includes an IP address for the server and 
1 0 a host name or similar machine identifier of the server. Such information is represented by IP 
^ records of IP table 356 (Figure 3) and machine records of machine table 362, respectively. In 
yB particular, an IP record includes an IP identifier 358 which uniquely identifies the IP record and 
jz an IP address 360. A machine record includes a machine identifier 364 which uniquely identifies 

the machine record, a name 366 and a host identifier 368. Host identifier 368 stores a hardware 
h§ identifier associated with a particular one of servers 104A-C (Figure 1) and, in this illustrative 
~ embodiment, is a Sun host identifier assigned by the manufacturer of the one of servers 104A-C, 

namely, Sun Microsystems Inc. of Palo Alto, California. Name 366 (Figure 3) stores data by 
fU which a particular one of servers 1 04A-C (Figure 1) is identified and is generally selected in a 
O manner to be more memorable to human network managers in determining which of servers 
20 104A-C should provide which services. 

Display 1700 (Figure 17) shows a from by which the network manager adds, deletes, and 

modifies IP records of IP table 356 (Figure 3). IP addresses (e.g., address 360) represented in 

package/service interdependency database 210 are listed in list 1702 (Figure 17). To add a new 

IP address, the network manager enters the new IP address into text box 1708 and pushes button 
25 1710. To delete an IP address, the network manager selects the address from list 1702 and 

pushes button 1706. To edit an IP address, the network manager selects the address from list 

1710 and pushes button 1704. 

In response to pushing button 1704, display 1800 (Figure 18) is presented to the network 
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manager. The selected IP address is represented in text box 1802 and the network manager can 
modify the IP address there. The network manager presses button 1804 to effect the changes to 
the selected IP address. 

Display 1900 (Figure 19) shows a form by which the network manager can add, delete, 
5 and modify machine records of machine table 362 (Figure 3). Machines (e.g., machine name 

366) represented in package/service interdependency database 210 are listed in list 1902 (Figure 
19). To add a new machine, the network manager enters the new machine name into text box 
1908, enters an associated host identifier (to be stored as host identifier 368) in text box 1910, 
and pushes button 1912. To delete a machine, the network manager selects the machine from list 
10 1902 and pushes button 1906. To edit a machine, the network manager selects the machine from 

list 1 902 and pushes button 1 904. 
m3 In response to pushing button 1904, display 2000 (Figure 20) is presented to the network 

jg manager. The selected machine is represented in text box 2002 and the host identifier of the 
zi selected machine is represented in text box 2004. The network manager can modify the machine 
B name and host identifier in text boxes 2002 and 2004, respectively. The network manager 
g presses button 2006 to effect the changes to the selected machine. 

S IP addresses and machine names are associated with one another through IP-machine 

fy records of IP-machine table 328 (Figure 3). An IP-machine record includes an IP-machine 
□ identifier 330 which uniquely identifies the IP-machine record, an IP identifier 332, and a 
29 machine identifier 334. IP identifier 332 identifies the IP record of IP table 356 as representing 
the IP address with which the machine is associated, and machine identifier 334 identifies 
machine record of machine table 362 as representing the machine with which the IP address is 
associated. 

Associations between machines and IP addresses can be altered by the network manager 
25 in two ways: one through display 1 800 (Figure 1 8) and another through display 2000 (Figure 20). 

Display 1800 (Figure 18) includes a list 1806 of names of machines represented in 
machine table 362 (Figure 3). Those machines which are associated with the IP address 
represented in text box 1802 (Figure 18) are shown in list 1806 in a highlighted state. The 
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network manager toggles a machine's association with the IP address represented in text box 
1 802 by selecting the machine's name in list 1 806 and pressing button 1 808. 

In display 2000 (Figure 20), list 2008 represents IP address represented in IP table 356 
(Figure 3). Those IP address which are associated with the machine represented in text box 2002 
5 (Figure 20) are shown in list 2008 in a highlighted stated. The network manager toggles an IP 
address's association with the machine represented in text box 2002 by selecting the IP address 
in list 2008 and pressing button 2010. 

As described more completely below, association of a service with all server-specific 
information necessary for installation, e.g., an IP address and machine name in this illustrative 
1 0 embodiment, causes installation of the service. Such an association is represented by a service-IP 
^ record of service-IP table 3 1 8 (Figure 3). A service-IP record includes a service-IP identifier 320 
€i which uniquely identifies the service-IP record, a service version identifier 322, an IP identifier 
4£ 322, and an IP type 326. Service version identifier 322 identifies a service version record of 
%i service version table 346 as representing the associated service version, and IP identifier 322 
|5 identifies an IP record of IP table 356 as representing the associated IP address. The requisite 
s server-specific information is only present, in this illustrative embodiment, if the associated IP 
JJ address is also associated with a machine name as represented within IP-machine table 328. IP 
I type 326 stores data representing a type of IP address. IP type 326 allows multiple IP addresses 

O to be assigned to a single one of servers 104A-C (Figure 1) for different purposes and to be 
20 distinguished from one another according to the purpose identified as a type of IP. In this 

illustrative embodiment, a single server can have an IP address for World Wide Web services, 
such as serving HTTP requests, and can have a second IP address for music services, such as 
delivering data representing sample music or purchased music. Thus, in this illustrative 
embodiment, there are two types of IP addresses that can be assigned to a single server, namely, 
25 web IP addresses and music IP addresses. 

The form of display 1800 (Figure 18) allows the network manager to define associations 
between IP addresses and versions of services. In particular, display 1800 includes a list 1810 of 
versions of services represented in service version table 346 (Figure 3). Those service versions 



— 15 — 



Patent Application Attorney Docket P-2 138D 1 

which are associated with the IP address represented in text box 1802 (Figure 18) are shown in 
list 1 810 in a highlighted state. The network manager toggles a service version's association 
with the IP address represented in text box 1802 by selecting the service's name and version in 
list 1810 and pressing button 1812. 
5 Logic flow diagram 400 (Figure 4) illustrates the user interface by which a network 

manager effects changes in package/service interdependency database 210 (Figure 2). In step 
402 (Figure 4), the network manager is authenticated. Authentication can be accomplished 
through any currently used authentication mechanisms including, for example, requiring the 
network manager to supply user identification data and an associated password. 

1 0 In step 404 (Figure 4), the network manager specifies changes to service/package 

interdependency database 210 (Figures 2 and 3). In this illustrative embodiment, the network 

03 manager, through computer system 102 (Figure 1) and computer network 1 10, accesses a user 

J- interface implemented by master server 108. The user interface is implemented through the 
HTML forms which are described above with respect to Figures 1 1-20 and through which the 

U network manager specifies a number of actions. 

5 In database management, transactions involving a database are used to minimize data 

inconsistencies for others accessing the database during data writing. A transaction is a 
fy collection of one or more data access operations which are to be executed as a unit. Such allows 
f§ the network manager to work over a period of time to configure a group of inter-related data 
26 access operations, perform the operations in a relatively short period of time, and roll back the 
changes if necessary. Implementation of transactions through HTML forms is particularly 
difficult since the nature of HTML form interaction allows termination of such interaction at any 
time. In particular, an HTML form is presented as any other web page but allows the user to 
submit data in response to the form. Once such data is submitted, the user is generally free to 
25 terminate interaction and to browser other web pages. Thus, HTML forms generally do not rely 
upon prolonged interaction with a particular user. 

Part of the difficulty in implementing database transactions is that changes to a database 
are cumulative. For example, a network manager can add a new service and then associate that 
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service with one or more packages. However, to represent such associations in service-package 
table 310, for example, would require that a service version identifier 348 had already been 
created. While creation of the service version record within service version table 346 would 
create such an identifier, such creation should be executed with the action creating the 
5 association between the service and the package as parts of a single transaction. 

To implement database transactions using HTML forms, service/package 
interdependency database 210 (Figure 3) represents uncommitted actions in an action table 384. 
When the network manager specifies an action to be performed on service/package 
interdependency database 210, e.g., by pushing any of the buttons of Figures 1 1-20, the action is 

1 0 performed and is represented by an action record stored in action table 384 (Figure 3). Action 

records of action table 384 provide a mechanism by which actions can be rolled back and provide 

y3 an indication whether actions have been committed. As described below, actions are effectively 
limited to master server 108 (Figure 1), i.e., have no effect on servers 104A-C, until such actions 

Jf j are committed. However, immediate execution of the action allows a subsequent action to 

14 specify data from a previously executed but uncommitted action. 

For example, adding a new package as described above with respect to Figure 14 has an 

Jf immediate effect such that the new package is listed subsequently in display 1300 (Figure 13). 

fy Accordingly, the network manager is able to specify an association between the newly added 

n package and a service in the manner described above with respect to Figure 13. In particular, list 

Si 1302 is created by reading all version of all packages from package version list 336 which 
includes the recently added new package. 

The newly executed action has no effect outside master server 1 08 because no package or 
service is deployed if the package or service relied upon an uncommitted action and uncommitted 
actions are eventually undone if not committed. 

25 An action record of action table 384 includes an action identifier 386 which uniquely 

identifies the action represented by the action record. In addition, an action record includes a 
type 388, a description 390, an undo command 392, an affected table 394, a key identifier 396, 
and a committed flag 398. Type 388 specifies the type of action and can represent an insertion, a 
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deletion, or a modification of a record of service/package interdependency database 210, 
Description 390 stores data summarizing the action to a human network manager. Description 
390 is intended to provide a meaningful summary of the action such that a human network 
manager can evaluate whether the action should be performed or rolled back. Undo command 
392 is a database access command whose performance effectively reverses the action represented 
by the action record. Actions are rolled back by execution of the respective undo commands 392 
of the rolled-back actions. Affected table 394 specifies the table affected by the action. For 
example, if the action record represents a modification of an IP address, affected table 394 
specifies IP table 356 as the table within which the action is to be performed. Key identifier 396 
specifies the specific record within the table to be affected. Continuing in the example of 
modification of an IP address, key identifier 396 specifies the IP identifier, e.g., IP identifier 358, 
of the particular IP record to modify. Committed flag 398 indicates whether the action 
represented by the action record has been committed. 

Through interaction between the network manager and master server 1 08 (Figure 1) 
through computer system 102 and computer network 110, actions that are performed at the 
request of the network manager are added to the current list until the network manager believes 
that the current list of actions will cumulatively have the desired effect on service/package 
interdependency database 210. The network manager clicks on tab 2102 to request display 2100 
(Figure 21). 

Display 2100 includes a list of radio buttons 2104-2108. Radio buttons are a known user 
interface mechanism. Briefly, the network manager can select only one of radio buttons 2104- 
2108; selection of any of radio buttons 2104-2108 automatically de-selects all others. The 
network manager selects one of radio buttons 2104-2108 and pushes button 2110. The selected 
radio button identifies the last pending action of action table 384 to be committed. All pending 
actions submitted earlier than the selected pending action are also committed. All pending 
actions subsequent to the selected pending action are rolled back. If the network manager selects 
radio button 2104, no pending actions are committed and all pending actions are rolled back. 
Pressing of button 21 10 is represented as step 406 (Figure 4). 
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In response to pushing of button 2110 (Figure 2 1 ) by the network manager, master server 
108 (Figure 1) sets committed flag 398 (Figure 3) of all committed action records according to 
the selected radio button of display 2100 (Figure 21). Actually performing the actions of the 
current list can take several minutes, and requiring the network manager to await 
5 acknowledgment that the actions were performed would be inconvenient for the network 
manager. Accordingly, master server 108 sends acknowledgment after merely marking the 
action records as committed, i.e., after merely setting committed flag 398, thereby providing 
feedback to the network manager in step 408 (Figure 4) much more quickly. Typically, the 
actions of the list will already have been performed within package/service interdependency 
10 database 210 and any rolling back of actions can be performed asynchronously with respect to 
feedback provided to the network manager in response to pushing button 2110 (Figure 21). In 
m one embodiment, rolling back of actions is performed synchronously with respect to feedback 
£ provided to the network manager in response to pushing button 2110. 
1: As described above, the network manager can specify that one or more pending actions 

¥5 are to be rolled back. To roll back those actions, master server 108 performs the undo 
J commands, e.g., undo command 392, of those respective actions of the current list to remove the 
X associated action records from action table 384. After step 408 (Figure 4), processing according 
W to logic flow diagram 400 completes. 

p A number of conditions cause master server 108 (Figure 1) to initiate installation of one 

^t) or more services and/or packages. A service is ready for installation when the service is 

associated with all server-specific information necessary for an installation. In this illustrative 
embodiment, such server-specific information includes an IP address and a machine name. A 
package is ready for installation if a service or another package which depends upon the package 
is ready for installation. 

25 Commitment of the following actions can initiate installation of a service or a package: 

(a) an action which inserts an IP-machine record into IP-machine table 328 
and (i) the inserted IP-machine record associates a machine record of machine 
table 362 with an IP record of IP table 356 and (ii) the IP record is in turn 
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associated with a service version record of service version table 346 by a service- 
IP record of service IP table 318; 

(b) an action which inserts a service-IP record into service-IP table 318 
and (i) the inserted service-IP record associates a service with an IP record and (ii) 

5 the IP record is in turn association with a machine record by a machine-IP record 

in machine-IP table 328; 

(c) an action which inserts a service-package record in service-package 
table 310 and (i) the service is associated with an IP through service-IP table 318 
and (ii) the IP is associated with a machine through IP-machine table 328; and 

10 (d) an action which inserts a package dependency record into package 

dependency table 302 and (i) the inserted package dependency record associates, 

*D directly or indirectly through other package dependency records, a package with 

another package and (ii) the other package is associated with a service through 

;ij service-package table 310 and (iii) the service is associated with an IP through 

W5 service-IP table 318 and (iv) the IP is associated with a machine through IP- 

s " machine table 328. 

y It should be noted that, in this illustrative embodiment, commitment of actions (a)-(d) is 

pi what can cause installation and not performance of actions (a)-(d). As described briefly above, 
O uncommitted actions are limited in their effect to master server 108 and do not effect servers 
56 104A-C. 

Commitment of actions (a) and (b) cause installation of the service and all packages on 
which the service depends, directly or indirectly, as shown by logic flow diagram 500 (Figure 5). 
Commitment of actions (c) and (d) cause installation of the requisite package and all packages, 
on which the requisite package depends, directly or indirectly, as shown by logic flow diagram 
25 510 (Figure 6) which is described below. 

Logic flow diagram 500 (Figure 5) illustrates installation of a service to a particular one 
of servers 104A-C (Figure 1). In the context of logic flow diagram 500 (Figure 5), the service 
being installed is referred to as the subject service and the particular one of servers 104A-C to 
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which the subject service is being installed is referred to as the subject server. In step 502 
(Figure 5), master server 108 (Figure 1) retrieves the service version record of service version 
table 346 (Figure 3) which represents the service to be installed and the machine and IP records 
associated with the service. In step 504 (Figure 5), master server 108 (Figure 1) bundles the 
5 service to the one of servers 104A-C which is associated with the service in a manner described 
more completely below in conjunction with logic flow diagram 700 (Figure 7). As used herein, 
"bundling" refers to collection and preparation of data and software for transport to the subject 
server. Initially, the bundle is empty. Bundling of the subject service in the manner described 
below adds data and software representing the service to the bundle for ultimate transport to the 
10 subject server in step 514 (Figure 5) below. 

In step 506, master server 108 (Figure 1) finds all packages on which the subject service 
S depends. Master server 108 finds such packages by searching service-package table 310 (Figure 
l: 3) for all records whose service version identifiers 314 identify the subject service. Package 

version identifiers 3 1 6 of such records identify packages on which the subject service depends. 
ftS Loop step 508 (Figure 5) and next step 512 define a loop in which each of the packages is 

7" processed according to step 510. During each iteration of the loop of steps 508-5 12, the package 
y processed according to step 5 1 0 is referred to as the subject package. Once all packages on 
fy which the subject service depend have been processed according to the loop of steps 508-5 1 2, 
p processing transfers to step 514 which is described below. 

yb Each package on which the subject service depends is therefore processed according to 

step 510. In step 510, master server 108 (Figure 1) bundles the subject package and all packages 
on which the subject package depends for transport to the subject server. Step 5 10 is shown in 
greater detail as logic flow diagram 510 (Figure 6). 

In step 602 (Figure 6), master server 108 (Figure 1) retrieves the package version record 

25 of package version table 336 (Figure 3) which represents the subject package and the machine 
and IP records associated with the subject package, i.e., the same machine and IP records for the 
subject service. In step 604 (Figure 6), master server 108 (Figure 1) bundles the subject package 
for transport to the subject server in a manner described more completely below in conjunction 
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with logic flow diagram 700 (Figure 7). 

In step 606 (Figure 5), master server 108 (Figure 1) finds all packages on which the 
subject package depends. Master server 108 finds such packages by searching package 
dependency table 302 for all records whose package version identifiers 306 identify the subject 

5 package. Referenced package version identifiers 308 of such records identify packages on which 
the subject package depends. 

Loop step 608 (Figure 6) and next step 612 define a loop in which each of the packages is 
processed according to step 510. Step 510 is performed recursively. As described above, master 
server 108 (Figure 1) bundles each package, and all packages on which the package depends, for 

1 0 transport to the subject server in step 510. Once all packages on which the subject package 

«=. depends have been processed according to the loop of steps 608-612, processing according to 

fl logic flow diagram 510, and therefore step 510 (Figure 5), completes. 

If Once the subject service and all packages on which the service depends are bundled, the 

zl contents of the bundle is transported to the subject server in step 514. Master server 108 (Figure 
\4 1) transports the contents of the bundle through computer network 1 1 0 to the subject one of 
„ 5 servers 104A-C, in particular, to a predetermined location within the subject server such as a 
5f predetermined directory within the subject server, e.g., "Amp." In this illustrative embodiment, 
H-i master server 108 transports the contents of the bundle using the known "scp" utility. After step 
p 514 (Figure 5), processing according to logic flow diagram 500 completes. 
W In this illustrative embodiment, the bundle is a script, execution of which causes the 

contents of the bundle to be transported to the subject server. In this embodiment, step 504 
includes writing an "install-service-to-machine" command to the script, and step 604 (Figure 6) 
includes writing an "install-package-to-machine" command to the script. Upon completion of 
logic flow diagrams 500 and 510, master server 108 (Figure 1) writes an end-of-script marker, 
25 e.g., "#EOF," to the script such that another process within master server 108 which is 

responsible for executing the script will refrain from doing so until the script is complete. 

In this illustrative embodiment, the script is executed with the highest available 
privileges, e.g., as "root" on a UNIX operating system of master server 108. Such allows 
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execution of the script to perform tasks only "root" can perform such as assigning the owner of 
data files. Accordingly, a few precautions are taken to avoid unauthorized cracking and 
interference with the installation process. First, the script is executed only if the script is owned 
by an entity which is previously designated as authorized to create installation scripts, e.g., the 
5 web server process in this illustrative embodiment. Second, the script is not executed in the 
conventional manner. Instead, the script is read command-by-command and each command is 
executed only if the command is either the "install-service-to-machine" command or the "install- 
package-to-machine" command. Accordingly, other commands which might be placed in the 
script by a skilled but unauthorized cracker are not executed with such high privileges. In an 

10 alternative embodiment, the script includes an encrypted signature, e.g., encrypted according to 
the known MD5 encryption algorithm or similar encryption algorithm, and general purpose 

y5 commands other than the "install-service-to-machine" and "install-package-to-machine" 

JP commands are permitted. 

Jf ; While the script is executed by "root" in this illustrative embodiment, the transport 

¥5 through computer network 1 10 by the "scp" utility is performed under a less privileged authority. 
J* Allowing a highly privileged authority to authenticate itself through a computer network in a 
If? script requires that such authentication can be accomplished without human intervention, e.g., to 
HI enter a password. Accordingly, an "install" authority has minimal privileges and preforms the 
O transfer of the installation data through the "scp" utility. 

56 Within each of servers 104A-C, an installation manager executes. The installation 

manager periodically, e.g., every five (5) minutes, determines whether packed installation data 
exists in the predetermined location to which master server 108 writes such packed installation 
data. Upon detection by the installation manager, the installation manager processes the packed 
installation data in a manner described below in conjunction with logic flow diagram 800 (Figure 

25 8). 

Logic flow diagram 700 (Figure 7) illustrates bundling of either a service or a package for 
installation to the subject server. In the context of logic flow diagram 700, bundling of a package 
is analogous to bundling of a service. Accordingly, a service is described as being bundled in the 
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context of logic flow diagram 700 and that description is equally applicable to installation of a 
package except as otherwise noted. In the following description of logic flow diagram 700, the 
service being bundled is referred to as the subject service. 

In step 702 (Figure 7), master server 108 (Figure 1) retrieves the template of the subject 
5 service, e.g., template 202. In step 704 (Figure 7), master server 108 retrieves server-specific 
information, namely, the IP address and the host name as represented in package/service 
interdependency database 210. In step 706 (Figure 7), master server 108 replaces the placeholder 
data of the retrieved template as described above with the server-specific information to form 
installation data. For example, master server 108 replaces each occurrence of 
1 0 "%%WEB JP%%" and "%%MUSIC_IP%%" within configuration data files 204 and installation 

scripts 206 with the IP address of the appropriate type of the subject server as retrieved from 
*Q package/service interdependency database 210. Similarly, master server 108 replaces each 
% occurrence of "%%MACHINE JJAME%%" within configuration data files 204 and installation 
2 scripts 206 with the host name of the subject server as retrieved from package/service 
H interdependency database 210. As a result of step 706 (Figure 7), master server 108 has 
J produced all data necessary for installation of the subject service on the subject server. Such 
y installation data includes configuration data files specifically configured for the subject server, 
W program modules — e.g., program modules 208 — which define the behavior of the subject 
q service, and installation scripts which are specifically configured to install the configuration data 
20 files and program modules to execute properly within the subject server. 

Master server 108 packs the installation data in step 708 (Figure 7). Such packing 
includes forming an archive of the installation data, e.g., using the known "tar" archive utility, 
and compressing the archive to minimize the requisite network bandwidth in transporting the 
archive from master server 108 through computer network 1 10 to the subject one of servers 
25 104A-C. In this illustrative embodiment, compression is accomplished by the known "gzip" 

compression utility. In an alternative embodiment, compression is accomplished by the known 
"compress" compression utility available with many commercial distributions of the UNIX 
operating system. 
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In step 710 (Figure 7), master server 108 adds the packed installation data to the bundle 
for subsequent transport through computer network 1 10 to the subject one of servers 104A-C. 

After step 710 (Figure 7), processing by master server 108 (Figure 1) in installing the 
service or package completes. As described above, after transport of the bundled installation 
5 data to the subject server and upon detection by the installation manager of the subject server, the 
installation manager processes the packed installation data in a manner illustrated by logic flow 
diagram 800 (Figure 8). 

In step 802, the installation manager of the subject server unpacks the packed installation 
data. In this illustrative embodiment, the installation manager first decompresses the installation 

1 0 data using the known "gzip" compression utility and then extracts the individual data files of the 
installation data using the known "tar" archiving utility. As described above, the known 
"compress" compression utility is used in an alternative embodiment to decompress the 

% installation data. The extracted data files include configuration data files, installation scripts, 
5 and/or program modules which are specifically tailored to the subject server in manner described 
U above. 

y In step 804, the installation manager of the subject server executes the installation scripts. 

5 All logic required to effect installation of the subject service or package is embodied in the 
fli installation scripts included with the program modules and configuration data files. Accordingly, 
S any changes in the manner in which services and packages are installed are controlled through 

11 the master server. As a result, virtually no direct maintenance of servers 104A-C are required. 
Instead, virtually all maintenance of software installed on servers 104A-C is automated through 
master server 108. Execution of the installation scripts by the installation manager of the subject 
server typically includes copying of the configuration data files and program modules to 
appropriate locations within storage of the subject server. Such locations are described below 

25 and are configured to allow multiple versions of each service and package to coexist within the 
subject server. Examples of other tasks that can be performed by the installation scripts include 
for example (i) creating a directory for storage of log files, (ii) creating a username under which 
the service or package is to execute, (iii) storing symbolic links to the service or package in a 
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location within the subject server such that the operating system of the subject server is aware of 
the existence and location of the service or package and can automatically initiate execution of 
the service or package, and (iv) initiating execution of other installation scripts which perform 
such tasks as those described above. 
5 After step 804 (Figure 8), installation of the subject service and packages on which the 

service depends is complete and the service and packages are available to clients of the subject 
server. In step 806, the installation manager of the subject server deletes any remnants of the 
installation data from the predetermined location at which the packed installation data was 
received. After step 806, processing according to logic flow diagram 800 completes. 

10 

Integration with Source Code Control 
yy In the embodiments described above, the services and packages — in particular the 

j* executable computer instructions such as program modules 208 (Figure 2) — are stored and 
JfJ moved through computer network 1 10 as object code. Object code is the object of a process 
tS known as compilation. Compiling of computer code is the translation of the computer code from 
J a form intelligible to human software engineers, i.e., source code, to a form more near the form 
2 of instructions executed in the particular type of processor for which the computer code is 
fy intended. 

n To form program modules 208, source code is written by software engineers and 

M compiled into object code which is then stored with templatized configuration data files 204 and 
templatized installation scripts 206 to form template 202. Further in accordance with the present 
invention, the process of making template 202 can be further streamlined such that even less 
human interaction is needed to bring new versions of packages and services into use in any of 
servers 104A-C. Such streamlining is provided by combining a source code control system 212 
25 (Figure 2), such as the known Concurrent Versions System (CVS), with the automated 
installation system described above. 

In particular, step 502 (Figure 5) of logic flow diagram 500 is modified to look to source 
code control system 212 (Figure 2) rather than template 202 for program modules 208. Step 602 
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is modified in a directly analogous manner such that the follow description of modification to 
step 502 is equally applicable to step 602. 

Step 502 is shown in greater detail as logic flow diagram 502 (Figure 10). In step 1002, 
master server 108 (Figure 1) queries source code control system 212 (Figure 2) to determine 
5 whether the subject service is maintained within source code control system 212. Master server 
108 (Figure 1) makes such a determination by requesting a read-only copy of the subject service 
and determining whether source code control system 212 returns an error message indicating no 
such source code is maintained within source code control system 212. In test step 1004 (Figure 
10), master server 108 determines from the response of source code control system 212 (Figure 
10 2) whether source code control system 212 maintains the subject service. 

If source code control system 212 does not maintain the subject service, master server 
€1 108 — in step 1006 — retrieves program modules 208 from template 202 and processing 
]g according to logic flow diagram 502, and therefore step 502 (Figure 5), completes. 
t} Conversely, if source code control system 212 (Figure 2) maintains the subject services, 

t# processing transfers from test step 1004 (Figure 10) to step 1008. In step 1008, master server 

1 08 (Figure 1) extracts a copy of the source code for the subject service into a temporary 
r? location. In step 1010 (Figure 10), master server 108 (Figure 1) compiles the source code to 
HI form program modules 208 (Figure 2). In this illustrative embodiment, master server 108 (Figure 
O 1) uses the known "make" command to compile the extracted source code. After step 1010, 
id processing according to logic flow diagram 502, and therefore step 502 (Figure 5), completes. 
Program modules 208 (Figure 2) are then bundled and transported to the subject server in the 
manner described above. 

In an alternative embodiment, the retrieved source code itself is bundled and transported 
to the subject server in the manner described above and the installation script executed by the 
25 subject server compiles the source code within the subject server. Whether the source code is 

compile within the subject server or within master server 108, any retrieved copies of the source 
code and any other intermediate data files of the compilation are deleted and the resulting object 
code is stored in the appropriate directory as described more completely below and as specified 
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in the installation script. 

Thus, according to logic flow diagram 502 (Figure 5), all the advantages of elaborate 
source code control systems such as CVS are added to the automated service/package installation 
system described herein. By merely associating a service or package with a particular one of 
5 servers 104A-C in the manner described above, the latest source code is automatically compiled 
and sent to the server with minimal involvement of a human network manager. 

Service and Package Organization in a Server 

As described briefly above, multiple versions of a service or package can coexist within a 
10 server, e.g., server 104A. Directory structure 900 (Figure 9) illustrates the organization of data 

files within server 104 A to allow multiple versions of a package or service to exist concurrently 
oj within server 1 04A. 

V An "opt" directory 902 contains directories for all services and packages installed in 

server 104A. Directories 904 and 906 each contain a respective installed service. A "packages" 
M directory 908 contains all installed packages of server 104A, and directories 910 and 912 each 
T contain a respective installed package. In this illustrative example, directory 910 contains the 
rf installed package implementing the known "apache" World Wide Web server, and directory 912 
Hi contains the package implementing the known "perl" scripting language. 
S For illustration purposes, consider the example in which the service of directory 904 

M requires a specific version of apache, e.g., version 1 .3.12, and the service of directory 906 
requires a different version of apache, e.g., version 2.0. All data files which are version- 
independent are stored in directory 910. Version-independent data files of directory 910 can be, 
for example, data files specifying Multi-purpose Internet Mail Extension (MIME) types and 
corresponding filename extensions specifying a particular data file type served by apache. 
25 Version-independent data files can also be stored in a subdirectory of directory 910 which is 

designated for storage of version-independent data files. Version-specific data files are stored in 
appropriate version-specific directories. For examples, data files which are specific to version 
1.3.12 of apache are stored in directory 914 and subdirectories thereof (e.g., directories 918-922), 
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and data files which are specific to version 2.0 of apache are stored in directory 916 and 
subdirectories thereof (i.e., directories 924-928). The first service, i.e., the service of directory 
904, is configured to use the version of apache stored in directory 914 which in turn is configured 
to look to directory 910 for some of the configuration data, namely, version-independent 
5 configuration data. The second service, i.e., the service of directory 906, is configured to use the 
version of apache stored in directory 916 which in turn is configured to look to directory 910 for 
some of the configuration data, namely, version-independent configuration data. 

There are a number of ways in which a service can be configured to use a specific version 
of a package. The following examples are illustrative. 
1 0 In one example, the package is the known perl scripting language interpreter. In this 

example, program modules 208 (Figure 2) include perl scripts. A perl script includes, in its first 
*o line, data identifying the specific perl interpreter which should execute the script. Accordingly, 
IE perl scripts in program modules 208 include placeholder data in the first line, such as 
ti: "%%PERL_VROOT%%," which represents the version-dependent directory in which such an 
H interpreter is installed. Accordingly, when deployed, the scripts are modified such that the 
T placeholder data is replaced with data specifying the version-dependent directory for the specific 
5| version of perl as described above with respect to step 706 (Figure 7). As a result, executing of 
fij any such scripts involves interpretation in accordance with the specific version of perl indicated 

I s I 

D in the perl scripts of program modules 208 (Figure 2). Such scripts which define part of a service 
M are therefore configured to use a particular version of a package, e.g., perl. 

In another example, the package is the known apache web server package. In this 
example, the apache web server package is set to execute continuously and to monitor requests 
for the particular service using the apache web server package, i.e., the subject service in this 
context. The apache web server package can determine whether a request is for the particular 
25 service according to the URL (universal resource locator) of the request. In this example, 
installation of the subject service configures the particular version of the package, e.g., the 
apache web server package, to refer requests to the service. 

Installation of the subject service executes an "install-for-service" script for the 
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appropriate version of the apache web server package. The "install-for-service" script is part of 
the installation of the package and creates symbolic links which cause the package to be started 
upon booting of the server on which the package and subject service are installed. The symbolic 
links also configure the package to interact with the subject service, e.g., by forwarding requests 
5 intercepted by the apache web server package to the subject service. Such symbolic links can 
refer to scripts, execution of which cause the apache web server to execute and to monitor 
requests for specific URLs. Thus, when the server is booted, the specific version of the apache 
web server package is started and is configured to handle requests of the subject service and to 
forward such requests to the subject service. In this way, the subject service is configured to use 
1 0 a specific version of the package. 

_ A number of advantages are realized by allowing multiple versions of a package to 

*Q execute concurrently on the subject server. One advantage is the assurance of continued 

1* operation of previously installed services. Consider the example of Figure 9. The first service 

j£J (of directory 904) depends upon version 1 .3 . 1 2 of apache while the second service (of directory 

i-5 906) depends upon version 2.0 of apache. If installation of the second service included replacing 

T version 1.3.12 of apache with version 2.0, the first service would then interact with version 2.0 of 

apache and may fail to execute properly due to differences between the respective versions of 
Hi apache. Accordingly, installation of the second service and the newer version of apache does not 
S affect the performance of the first, previously installed service. 

§6 Another advantage is improved fault resistance of the subject server. Suppose, for 

example, that execution of the second service together with version 2.0 of apache results in an 
invalid state which causes failure of apache version 2.0. Since version 1.3.12 of apache executes 
independently within the subject server, apache version L3.12, the second service, and other 
services which depend upon apache version L3.12 can continue to execute successfully without 

25 interruption. 

This latter advantage can also be realized for services that use the same version of a 
package. Since the "install-for-service" script is executed — for some packages such as the 
apache web server package — for each service using that package. The result is that a separate 
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process for such a package executes for each service for which the package is installed. 
Accordingly, a failure in one process of the package does not interrupt execution of other 
processes of the same version of the same package, and services depending on those other 
package processes continue to function properly. Thus, fault resistance is significantly improved. 



The above description is illustrative only and is not limiting. For example, while a single 
master server 108 (Figure 1) is shown, it is appreciated that the acts performed by master server 
108 as described herein can be performed by a number of computer systems working 
10 cooperatively. It is preferred that such computer systems are sufficiently closely coupled and 
^ coordinated, e.g., through a local area network or as a distributed computer system, to provide a 
*0 comprehensive and integral package/service interdependency database 2 1 0. In addition, 
J! computer network 1 10 is the Internet in this illustrative example. However, computer network 
ji? 1 1 0 can be a different network such as a local area network or a different wide area network. 
¥5 The present invention is limited only by the claims which follow. 
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1 1 . A method for installing software on a selected one of a number of server computer 

2 systems, the method comprising: 

3 (a) retrieving a template which specifies one or more parameters specifying an 

4 aspect of the software and which includes placeholder data in place of server-specific 

5 data; 

6 (b) retrieving server-specific data for the selected server; 

7 (c) replacing the placeholder data of the template with the server-specific data 
J! of the selected server to form installation data; and 

# (d) sending the installation data to the selected server in such a manner that 

|0 causes the selected server to install the software in accordance with the installation data. 

H 2. The method of Claim 1 wherein the template includes one or more configuration 

5 2 data files. 

ft| 3 . The method of Claim 1 wherein the template includes one or more installation 

O scripts, each of which includes one or more computer instructions which are to be executed by 

^ the selected server to effect installation of the software. 

1 4. The method of Claim 3 wherein (d) sending comprises: 

2 sending the installation data to the selected server in such a manner that causes the 

3 selected server to install the software by, at least in part, executing the one or more 

4 installation scripts. 

1 5 . The method of Claim 4 wherein (d) sending further comprises: 

2 sending the installation data to the selected server in such a manner that enables 
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3 the selected server to verify that the one or more installation scripts are owned by a 

4 previously authorized owner prior to installing the software by, at least in part, executing 

5 the one or more installation scripts. 

1 6. The method of Claim 1 wherein the template includes one or more computer 

2 program modules which define at least part of the software to be installed on the selected server. 

1 7. The method of Claim 1 wherein the server-specific data specifies a computer 

2 network address of the selected server. 

J 8. The method of Claim 7 wherein the computer network address is an IP address. 

jj 9. The method of Claim 1 wherein the server-specific data specifies a name which 

Jfi identifies the selected server. 

71 10. The method of Claim 1 wherein (d) sending comprises: 

y sending the installation data through a computer network to the selected server. 

3 11. The method of Claim 1 0 wherein the computer network is the Internet. 

1 12. The method of Claim 1 wherein (d) sending comprises: 

2 sending the installation data to a predetermined storage location within the 

3 selected server. 

1 1 3 . The method of Claim 1 2 wherein the selected server is configured to detect 

2 installation data stored at the predetermined storage location and to process the installation data 

3 upon such detection. 
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1 14. The method of Claim 1 2 wherein the predetermined storage location is a 

2 predetermined directory within the selected server. 

1 15. The method of Claim 1 wherein the selected server is configured to delete the 

2 installation data after installation of the software in accordance with the installation data. 

1 1 6. A computer-readable storage medium on which is stored computer instructions 

2 which, when executed by a computer, cause the computer to install software on a selected one of 

3 a number of server computer systems by: 

4 (a) retrieving a template which specifies one or more parameters specifying an 
4 aspect of the software and which includes placeholder data in place of server-specific 

;§> data; 

Jy (b) retrieving server-specific data for the selected server; 

^| (c) replacing the placeholder data of the template with the server-specific data 

h9 of the selected server to form installation data; and 

Jo (d) sending the installation data to the selected server in such a manner that 

|i causes the selected server to install the software in accordance with the installation data. 

P 17. The computer-readable storage medium of Claim 1 6 wherein the template 

*i> includes one or more configuration data files. 

1 18. The computer-readable storage medium of Claim 1 6 wherein the template 

2 includes one or more installation scripts, each of which includes one or more computer 

3 instructions which are to be executed by the selected server to effect installation of the software. 

1 19. The computer-readable storage medium of Claim 1 8 wherein (d) sending 

2 comprises: 

3 sending the installation data to the selected server in such a manner that causes the 
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selected server to install the software by, at least in part, executing the one or more 
installation scripts. 



1 20. The computer-readable storage medium of Claim 1 9 wherein (d) sending further 

2 comprises: 

3 sending the installation data to the selected server in such a manner that enables 

4 the selected server to verify that the one or more installation scripts are owned by a 

5 previously authorized owner prior to installing the software by, at least in part, executing 

6 the one or more installation scripts. 

4 2 1 . The computer-readable storage medium of Claim 1 6 wherein the template 

5 includes one or more computer program modules which define at least part of the software to be 
M installed on the selected server. 

Nj 22. The computer-readable storage medium of Claim 1 6 wherein the server-specific 

s 2 data specifies a computer network address of the selected server. 

fH 23. The computer-readable storage medium of Claim 22 wherein the computer 

CE network address is an IP address. 

1 24. The computer-readable storage medium of Claim 16 wherein the server-specific 

2 data specifies a name which identifies the selected server. 

1 25. The computer-readable storage medium of Claim 16 wherein (d) sending 

2 comprises: 

3 sending the installation data through a computer network to the selected server. 
1 26. The computer-readable storage medium of Claim 25 wherein the computer 
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1 27, The computer-readable storage medium of Claim 1 6 wherein (d) sending 

2 comprises: 

3 sending the installation data to a predetermined storage location within the 

4 selected server. 

1 28. The computer-readable storage medium of Claim 27 wherein the selected server is 

2 configured to detect installation data stored at the predetermined storage location and to process 

3 the installation data upon such detection. 

tf| 29. The computer-readable storage medium of Claim 27 wherein the predetermined 

42 storage location is a predetermined directory within the selected server. 

\fl 30. The computer-readable storage medium of Claim 16 wherein the selected server is 

s 2 configured to delete the installation data after installation of the software in accordance with the 

Ij3 installation data. 

Oi 3 1 . A computer system comprising: 

o 

2 a processor; 

3 a memory coupled to the processor; and 

4 a software deployment module which executes in the processor from the memory 

5 and which, when executed, installs software on a selected one of a number of server 

6 computer systems by: 

7 (a) retrieving a template which specifies one or more parameters 

8 specifying an aspect of the software and which includes placeholder data in place 

9 of server-specific data; 

I o (b) retrieving server-specific data for the selected server; 
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1 1 (c) replacing the placeholder data of the template with the server- 

12 specific data of the selected server to form installation data; and 

1 3 (d) sending the installation data to the selected server in such a manner 

14 that causes the selected server to install the software in accordance with the 

15 installation data. 

1 32. The computer system of Claim 3 1 wherein the template includes one or more 

2 configuration data files. 

1 33. The computer system of Claim 3 1 wherein the template includes one or more 

X installation scripts, each of which includes one or more computer instructions which are to be 

# executed by the selected server to effect installation of the software. 

p| 34. The computer system of Claim 33 wherein (d) sending comprises: 

¥± sending the installation data to the selected server in such a manner that causes the 

g 3 selected server to install the software by, at least in part, executing the one or more 
installation scripts. 

Q 35. The computer system of Claim 34 wherein (d) sending further comprises: 

w 2 sending the installation data to the selected server in such a manner that enables 

3 the selected server to verify that the one or more installation scripts are owned by a 

4 previously authorized owner prior to installing the software by, at least in part, executing 

5 the one or more installation scripts. 

1 36. The computer system of Claim 3 1 wherein the template includes one or more 

2 computer program modules which define at least part of the software to be installed on the 

3 selected server. 
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1 37. The computer system of Claim 3 1 wherein the server-specific data specifies a 

2 computer network address of the selected server. 

1 38. The computer system of Claim 37 wherein the computer network address is an IP 

2 address. 

1 39. The computer system of Claim 3 1 wherein the server-specific data specifies a 

2 name which identifies the selected server. 

1 40. The computer system of Claim 3 1 wherein (d) sending comprises: 

4 sending the installation data through a computer network to the selected server. 

% 41 . The computer system of Claim 40 wherein the computer network is the Internet. 

Mj 42. The computer system of Claim 3 1 wherein (d) sending comprises: 

1 2 sending the installation data to a predetermined storage location within the 

2| selected server. 

3 43 . The computer system of Claim 42 wherein the selected server is configured to 

"2 detect installation data stored at the predetermined storage location and to process the installation 

3 data upon such detection. 

1 44. The computer system of Claim 42 wherein the predetermined storage location is a 

2 predetermined directory within the selected server. 

1 45. The computer system of Claim 3 1 wherein the selected server is configured to 

2 delete the installation data after installation of the software in accordance with the installation 

3 data. 
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ABSTRACT OF THE DISCLOSURE 

A human engineer using a computer system can maintain numerous software services and 
packages installed on a number of servers through a single master server and a computer 
network. Each software service and package is represented in a package and service template 
datastore 120 in templatized form. The installation template includes placeholder data which 
represents server-specific information used to install the computer software. The placeholder is 
included in program modules, configuration data files, and/or installation scripts. To install the 
computer software on the selected server computer, a master server retrieves server-specific 
information for the selected server, substitutes the retrieved server-specific data for the 
placeholder data to form server-specific installation data, and transports the server-specific 
installation data to the selected server for execution. 
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Post Office Address: same 

(□ A petition has been filed for this unsigned inventor.) 



Full Name of Second Joint Inventor: CHRIS J. HILLERY 



Inventor's Signature Date 

Residence: 2221 Broadway, Redwood City, California 94063 
Citizenship: United States of America 
Post Office Address: same 

(□ A petition has been filed for this unsigned inventor.) 
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DECLARATION FOR PATENT APPLICATION 



Attorney Docket No.: P-2138D1 



Full Name of Third Joint Inventor: WESLEY N. POPE 



Inventor's Signature Date 

Residence: 2221 Broadway, Redwood City, California 94063 

Citizenship: United States of America 

(□ A petition has been filed for this unsigned inventor.) 
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□ Page(s) of were not present 

for scanning. (Document title) 



□ Page(s) of were not present 

for scanning. (Document title) 
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